ETIC IPL-3G User Manual Download Page 54 | Manualshive

Page: 54 / 100

background image

SET UP

Page 54

User guide ref 9019409-01

UMTS GPRS EDGE router ref. IPL-3G

13 Routing functions

13.1 Basic routing function

Once an iP address has been assigned to the R2 router on the LAN interface and another one on the
WAN interface (see drawing hereafter), the IPL-3G R2 router is ready to route frames …

… between devices connected to the remote LAN network like RL1, and devices connected to
the LAN network like L1 through a VPN;

… between devices connected to the WAN network like W1, and devices connected to the LAN
network like L1

Remark 1 : Firewall rules must be set to authorize WAN to LAN transfer.

Remark 2 : A default gateway address must be entered in each device of the different networks.

RL1

VPN

WAN

192.168.3.0/24

LAN

192.168.2.0/24

W1

L1

Remote WAN

192.168.4.0/24

R3 router

192.168.2.128

R2 router

192.168.3.128

192.168.4.128

192.168.5.128

Remote LAN

192.168.5.0/24

«
...
52
53
54
55
56
...
»

Summary of Contents for IPL-3G

Page 1: ...IPL 3G UMTS GPRS EDGE IP Router RAS firewall _________________ USER GUIDE Document reference 9019409 01 _________________ ...

Page 2: ...9 01 UMTS GPRS EDGE router ref IPL 3G The IPL 3G router is manufactured by ETIC TELECOM 13 Chemin du vieux chêne 38240 MEYLAN FRANCE TEL 33 4 76 04 20 05 FAX 33 4 76 04 20 01 E mail hotline etictelecom com web www etictelecom com ...

Page 3: ...TTON 24 6 MOUNTING THE PRODUCT ON A DIN RAIL OR REMOVING IT 24 7 COOLING 26 8 RS232 INTERFACE 26 9 RS485 INTERFACE 27 10 DIGITAL INPUT AND OUTPUT 27 11 CONNECTING THE ANTENNA 27 12 INSTALLING THE SIM CARD 29 SET UP 1 SET UP STEPS 31 2 CONNECTING A PC TO THE ROUTER FOR CONFIGURATION 32 2 1 Overview 32 2 2 First configuration 32 2 3 Modifying the configuration from the LAN 33 2 4 Modifying the confi...

Page 4: ...YNDNS SERVICE 41 12 CREATING VPN CONNECTIONS BETWEEN ROUTERS 42 12 1 Principles 42 12 2 IPSec VPN connections 44 12 3 TLS VPN connections 50 13 ROUTING FUNCTIONS 54 13 1 Basic routing function 54 13 2 Static routes 55 13 3 RIP protocol 56 14 ADDRESS AND PORT TRANSLATION 57 14 1 Port forwarding 57 14 2 Advanced network address and port translation 58 15 VRRP REDUNDANCY 62 15 1 Principle 62 15 2 Con...

Page 5: ...ters 77 21 SERIAL TO IP GATEWAY 81 21 1 Modbus menu 82 21 2 RAW TCP gateway 84 21 3 RAW UDP gateway 86 22 USB TO IP GATEWAY 88 22 1 Principles 88 22 2 Configuration 88 23 ADVANCED FUNCTIONS 89 23 1 Adding a certificate 89 23 2 Alarms 89 23 3 Configuring the web portal 90 23 4 Configuring the DNS server 91 DIAGNOSTIC MAINTENANCE 1 DIAGNOSTIC MENU 93 2 SAVING THE CONFIGURATION TO A FILE 95 3 UPDATIN...

Page 6: ......

Page 7: ...t the location where you wish to install the router Do not use the IPL 3G router in locations with a potentially explosive atmosphere like for instance petrol stations or areas where the atmosphere contains chemicals or particles The IPL 3G uses the UMTS radio network and wireless waves It is why it is not possible to guarantee it will connect without interruption It is not possible to rely only t...

Page 8: ......

Page 9: ...Electromagnetic compatibility and Radio spectrum Matters Part 1 General requirements EN301489 7 Electromagnetic compatibility and Radio spectrum Matters Part 7 Specific conditions for mobile and portable radio and ancillary equipment of digital cellular radio EN61000 6 2 Ed 2001 Immunity EN60100 4 2 Electrostatic Discharge EN60100 4 3 Radiated Immunity EN60100 4 4 EFT Burst Immunity EN60100 4 5 Su...

Page 10: ......

Page 11: ...Hz IP router Remote access server PPTP or TLS 25 users Firewall SPI Serial gateway USB gateway 25 IPSEC or SSL client or server VPNs RJ45 10 100 BT 4 4 2 2 2 2 2 2 RS232 1 1 2 2 RS485 1 1 USB host 1 1 Port forwarding Source IP address translation NAT SNMP DHCP client or server over the LAN interface DHCP client 3G interface RIP LAN WAN Digital input for emails 1 1 1 1 1 1 1 1 Html Configuration IO...

Page 12: ...access server PPTP or TLS 25 users Firewall SPI Serial gateway USB gateway 25 IPSEC or SSL client or server VPNs RJ45 10 100 BT 4 4 2 2 2 2 2 2 RS232 1 1 2 2 RS485 1 1 USB host 1 1 Port forwarding Source IP address translation NAT SNMP DHCP client or server over the LAN interface DHCP client 3G interface RIP LAN WAN Digital input for emails 1 1 1 1 1 1 1 1 Html Configuration IO Viewer compatible V...

Page 13: ...ncy UMTS 850 1900 2100 MHz 900 2100 MHz Frequency GSM 850 900 1800 1900 MHz 900 2100 MHz RF power EGSM850 EGSM900 class 4 2 W GSM1800 GSM1900 class 1 1 W Antenna Connector SMA UMTS HSDPA HSDPA 7 2 Mb s downlink 384 kbps uplink EDGE GPRS 236 8 Kb s downlink uplink GPRS Multislot class 12 Ethernet IP router Ethernet 10 100 BT 2 or 4 switched ports IP router Remote connections static routes RIP V2 IP...

Page 14: ...n password Certificate X509 M2Me VPN Compliant with the M2Me_Secure VPN client Compliant with the M2Me_Connect mediation service Alarms 3 inputs emails Serial interface RS232 1200 115200 kb s parity N E O RS232 or RS485 2 wires USB USB host interface Serial asynchronous to IP gateways Modbus master and slave Raw TCP client and server Telnet RAW UDP multicast unitelway option ...

Page 15: ... between the devices connected to the routers The product includes an up to date serial to IP gateway enabling to connect devices directly to the 3G network and the Internet The IPL 3G is at the same time an IP router a VPN client or a VPN server a remote access server RAS and a stateful packet inspection firewall The IPL 3G is a member of the range of industrial routers manufactured by ETIC TELEC...

Page 16: ...ot fixed It is possible to use either the DynDNS service or the M2Me_Connect service provided by ETIC TELECOM The M2Me_Connect service makes possible to set a secure connection between A remote maintenance PC on one hand and an Ethernet or a serial Machine network on the other hand through the Internet The M2Me_Connect service is specially efficient for remote maintenance of automated systems The ...

Page 17: ... firewall It is able to check source and destination IP addresses and port numbers for data coming the from the WAN interface or from the LAN interface Remote access server Remote users are authenticated an IP address belonging to the LAN interface is automatically assigned to their PC Moreover The traffic coming from the PC of each remote user is filtered according to the remote user identity M2M...

Page 18: ...r factory IP address or stored IP address EticFinder software The ETICFinder software is delivered with the product It detects the ETIC products connected to an Ethernet interface and displays the MAC address and the iP address of each product M2Me_Secure VPN client software M2Me_Secure is a TLS client able to register up to 100 VPN connections the user can set on a click That feature is provided ...

Page 19: ...INSTALLATION UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 19 1 Dimensions Dimensions 2 Connectors IPL 3G X 1220 IPL 3G X 1230 IPL 3G X 1400 ...

Page 20: ...Digital input 7 F Digital output max 50Vdc 0 6A 8 F Digital output RJ45 connector Ethernet Positio n Name Description 1 Tx Emission polarity 2 Tx Emission polarity 3 Rx Reception polarity 4 N C 5 N C 6 Rx Reception polarity 7 N C 8 N C RS485 screw terminal Positio n Name Description 1 A RS485 polarity A 2 B RS485 polarity B RS232 RJ45 connector port 1 To connect to a DCE to the RS232 port Positio ...

Page 21: ...er guide ref 9019409 01 Page 21 RS232 RJ45 connector port 2 To connect to a DCE to the RS232 port Positio n Circuit Function 1 Not used 2 TD 103 OUT Data Emission 3 RD 104 IN Data Reception 4 Not used 5 SG 102 Ground 6 Not used 7 Not used 8 Not used ...

Page 22: ...L IPL 3G X 1230 IPL 3G X 1230 B with 2 RS232 interfaces Rx Flashing green Bytes received from the RS232 1 interface to IPL Tx Flashing green Bytes transmitted to the RS22 1 interface from IPL Rx Flashing green Bytes received from the RS232 2 interface to IPL Tx Flashing green Bytes transmitted to the RS22 2 interface from IPL RF reception signal strength indicator Description Status RF Reception d...

Page 23: ...INSTALLATION UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 23 ...

Page 24: ...CP server ON ON Reserved SW 3 SW 4 Not used 5 Factory default push button A push button is located under the lid at the top of the product It enables to restore the factory profile To restore the factory profile switch the power on while pressing the push button until the RUN light turns green Attention Once the factory profile has been restored the stored configuration is lost 6 Mounting the prod...

Page 25: ...INSTALLATION UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 25 ...

Page 26: ...bD 9 male To connect a DCE to the IPL 3G CAB59 3 SubD 9 female To connect a DTE to the IPL 3G CAB60 9 Wires To connect a device providing a specific connector CAB593 cable DB9 female RS232 connector Position Circuit Name IPL Terminal 1 CD 109 Carrier detect 2 RD 104 Data Reception 3 TD 103 Data Emission 4 DTR 108 Data terminal ready 5 GND 102 Ground 6 DSR 107 Data set ready 7 RTS 105 Request to se...

Page 27: ... longer distance connect a 120 Ohm resistor at each end of the line 10 Digital input and output Digital output Max voltage 48 VDC Max current 500 mA Digital input Maximum voltage 20 VDC 11 Connecting the antenna If the cabinet in which the router has to be installed is made of metal the antenna has to be installed outside the cabinet for instance on its top The antenna must be ordered separately t...

Page 28: ...INSTALLATION Page 28 User guide ref 99019409 01 UMTS GPRS EDGE router ref IPL 3G ANT211 ANT212 1 50 m ...

Page 29: ...ure it locks into place Step 2 Check the reception signal strength Switch on the router The led first lights red and then green The power indicator lights green The reception led flashes to indicate cyclically the reception signal strength The reception led must flash at least 2 times to ensure a reliable connection If the reception led flashes only one time the reception is poor it must be improv...

Page 30: ......

Page 31: ...up function IPL 3G 1201B Setting up remote users connections and the M2Me_Connect service Setting up the remote users list Setting up the serial gateway or the USB gateway Setting up the firewall The IPL 3G router is configured with a PC and an HTML browser 2 DIP switches enable you to set the IP address Factory address stored address BootP or DHCP client or server For the first configuration we a...

Page 32: ...ss We mean the lowest value of the addresses of the network For instance if the netmask of a network is 255 255 255 0 the network address of that network is X Y Z 0 Copy and paste Parameters must be entered with the keyboard they cannot be pasted However it can be useful to paste a string when it is long to avoid errors In that case paste the string delete the last character of the pasted string a...

Page 33: ...nter the IP address assigned to the router Or launch the ETICFINDER utility to detect the IPL 3G address Remark If the home page cannot be displayed refer below If the IP of the IPL 3G on the LAN interface is assigned by a DHCP server Step 1 Ensure the DIP switch SW1 is OFF and SW2 ON to select DHCP client operation Step 2 Launch ETIC FINDER to detect the IPL 3G address over the LAN interface Clic...

Page 34: ...check the Reboot button has disappeared from the green bar To save the configuration file to a hard disk Select the maintenance menu and then the Save restore menu Click the Save current configuration to disk button 4 Recovering the factory LAN IP address When launching the html browser the homepage of the html server may not be displayed the cause may be the IP address you entered was wrong if th...

Page 35: ...Recovering a free access to the administration server If the Login or password entered to reach the administration server have been rejected it is possible to recover a free access to the administration server from the LAN only by setting SW01 ON and SW2 OFF Remark The factory IP address 192 168 0 128 will also automatically be restored as long as SW01 will remain ON and SW2 OFF During normal oper...

Page 36: ...ce The IP address pool assigned to the remote users when they connect The administration server is located at that address On the LAN interface the IPL 3G can behave like a DHCP server Remark about IP addresses assignment rules The IPL 3G router will be able to route frames between the LAN and the WAN interface only if the IP address assigned to the network connected to the LAN interface is differ...

Page 37: ...hen on the OK button of the window entitled VPN properties Click the Modify button in front of the VPN connection field and then on the OK button If the DHCP server is used it must be launched again after the LAN IP address has been modified To launch again the DHCP server after the LAN IP address has been modified Select the LAN interface menu and the DHCP server menu Unselect the Enable the DHCP...

Page 38: ...menu and then WAN interface and then Connection Obtain an IP address automatically checkbox Set that option if the provider assigns automatically an IP address to the router through the air interface each time it connects to the 3G or GSM network Remark In most cases and in particular when the Ipl 3G is connected to the Internet that checkbox must be selected IP address netmask parameter Enter the...

Page 39: ...SET UP UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 39 Source account e mail address parameter Enter the email address attached to the account ...

Page 40: ...n Control Enable the ping control checkbox select that checkbox IP address to ping parameter Enter the IP address of the server to which the IPL 3G will transmit periodically a PING to control the connection works correctly Ping period parameter Enter the value of the period of the PINGS Ping retries parameter If a PING does not receive an answer the router will repeat PINGS at a high frequency If...

Page 41: ...nDNS service to set a connection from a device connected to the internet toward a device connected to the IPL 3G router To enable the DynDNS service proceed as follows Reserve a dynDNS domain name on the dyndns org web site For instance mymachine dyndns org Select the Set up menu and then WAN interface and then dynamic IP address Enable checkbox Select that checkbox DNS account login parameter Ent...

Page 42: ...n be easily used when the VPN must pass through several or even numerous company routers Once a type of VPN TLS or IPSec has been selected all the VPN set with the IPL 3G router will be of the same type Two steps are necessary to configure the IPL 3G to create VPN connections between routers 1st step Select the VPN type and set up the VPN parameters 2 types of VPNs can be used to connect IPL 3G ro...

Page 43: ...SET UP UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 43 To create VPN connections between routers select the Setup menu and then Network and then VPN connections ...

Page 44: ... is required ESP provides the same services plus encryption If ESP is selected an encryption and an authentication protocols must be selected Authentication encryption key parameters Authentication an encryption can be carried out with a pre shared key or a certificate Pre shared key value The pre shared key value applies to all the connections The maximum length of the key is 40 characters The sa...

Page 45: ... common algorithm DPD request period parameters A DPD request also called Keepalive message is a message sent periodically by each end point to the other one to make sure that the VPN must be left active This parameters sets the amount of time in seconds between two of these requests Connection death time out parameters This parameter defines the maximum amount of time in seconds a VPN connection ...

Page 46: ...ace Remote LAN address Remote LAN netmask parameters Enter the IP network address and netmask assigned to the remote LAN Preshared key If the preshared key used by the connection is the general PSK entered in the VPN menu no additional parameter has to be entered If a particular PSK must be used complete the configuration of the connection as explained below Unique PSK for this node parameter Sele...

Page 47: ...WAN address parameter Enter the IP address of the router on the WAN interface Certificate My subjectAlt name Remote subjectAlt name parameters Paste the field SubjectAltName of the active certificate of the router you are configuring and the one the remote router Attention For ETIC certificates this field is the Email field ...

Page 48: ...k address and netmask assigned to the remote router over its WAN interface Remote LAN address Remote LAN netmask parameters Enter the IP network address and netmask assigned to the remote LAN Preshared key If the key used by the connection is the general PSK entered in the VPN menu no additional parameter has to be entered If a particular PSK must be used carry out the configuration of the connect...

Page 49: ...he specific key My WAN address Remote WAN address parameters Enter the WAN IP address of the router and the WAN IP address of the remote router Attention For ETIC certificates this field is the Email field Certificate My subjectAlt name Remote subjectAlt name parameters Paste the field SubjectAltName of the active certificate of the router you are configuring and the one the remote router Attentio...

Page 50: ...ol used to transport the TLS VPN UDP will be preferred Attention The port number value must be different from the one used by remote users VPN network address VPN network netmask parameters The TLS VPN server router assigns automatically an IP address to the VPN client router That VPN IP address must not be confused with the WAN interface IP address Attention The VPN IP network address field must ...

Page 51: ...et retransmit time out parameter A control message also called Keepalive message is sent periodically by the VPN server router to make sure that the VPN must be left active This parameters sets the amount of time in seconds the server will wait for the response before repeating it Encryption algorithm Authentication algorithm parameter That parameters allow to define the encryption and hash algori...

Page 52: ...nnection direction option Login Password parameter Enter the login and password the router will have to use to authenticate Remote WAN IP address URL parameter Enter the IP address of the remote router or its DNS name Remote WAN IP address parameters Enter the IP network address and netmask assigned to the remote router over its WAN interface VPN INTERNET 3G LAN IP addr Outgoing connection WAN IP ...

Page 53: ...router password parameters Enter the login and password of the remote router The remote router has to use that login and password to authenticate Remote LAN address Remote LAN netmask parameters Enter the IP network address and netmask assigned to the remote LAN Common name parameters Enter the remote router certificate common name Attention For ETIC certificates this field is the Email field VPN ...

Page 54: ...e remote LAN network like RL1 and devices connected to the LAN network like L1 through a VPN between devices connected to the WAN network like W1 and devices connected to the LAN network like L1 Remark 1 Firewall rules must be set to authorize WAN to LAN transfer Remark 2 A default gateway address must be entered in each device of the different networks RL1 VPN WAN 192 168 3 0 24 LAN 192 168 2 0 2...

Page 55: ...2 168 4 0 255 255 255 0 192 168 5 128 Remark It is not necessary to enter in the router R2 the static route to the WAN network nor to the remote LAN network that routes have been automatically created by the router respectively when the WAN IP address has been entered and when the VPN has been configured To set a static route Select the Configuration menu the network menu the Routing menu and then...

Page 56: ... Each router holds a routing table Each entry of the table consists in the destination subnet address and the adjacent router address leading to that subnet Routing table broadcasting Each router broadcasts its table Routing table update Each router updates its own table using the tables received from the other ones To enable RIP select the Setup menu the Routing menu and then the RIP menu Select ...

Page 57: ... to the LAN interface Example Let us suppose the PC named W1 connected to the Internet has to send frames to the device PLC1 connected to one Ethernet port of the IPL 3G router The solution can be to use the Port forwarding function When W1 needs to transmit frames to PLC1 it addresses the frames to the IPL 3G router on a chosen and agreed port The router checks the frame replaces the destination ...

Page 58: ...remote user PPTP or TLS connection It applies as well to frames the destination address of which is the IPL 3G router itself or to frames the destination IP address is a device belonging to the LAN subnet or to the WAN subnet or to another network One brings out the DNAT function which consists in replacing the destination port and IP address the SNAT function which consists in replacing the sourc...

Page 59: ...slation functions select the Setup menu Network and then the Advanced NAT menu To create a new DNAT rule Click Add a DNAT rule Select Yes to enable the rule Enter the replacement criterion Source IP address Destination IP address Protocol TCP UDP Source port Destination port Enter the new destination port number and IP address ...

Page 60: ...SET UP Page 60 User guide ref 9019409 01 UMTS GPRS EDGE router ref IPL 3G ...

Page 61: ...9019409 01 Page 61 To replace the source IP address destination port Click Add a SNAT rule Select Yes to enable the rule Enter the replacement criterions Source Destination IP address Protocol TCP UDP Source Destination port Enter the new source IP address ...

Page 62: ...ex the routers of the group can elect a master router the master router is the one which has the greatest priority code The other routers are the backup routers The master router is the only one to answer to the ARP requests and route actually frames It uses the virtual IP address and the virtual MAC address If that option has been selected In case of failure of the master router another master ro...

Page 63: ...P on the WAN interface parameter Tick that checkbox to enable VRRP on the LAN interface VRRP Id 1 255 parameter Assign an identity code to the routers group between 1 and 255 The same identity code must be assigned to all the routers of the group Virtual IP address parameter Enter the IP address the elected master router will use to answer to ARP requests Priority 1 255 parameter Assign a priority...

Page 64: ...ly allocated to the remote user An IP address belonging to the LAN network is automatically assigned to the remote PC Data are encrypted TLS and L2TP IPSec only The connection is logged Moreover the IPL 3G is compatible with the M2Me_Connect service when setting a direct connection is not possible To setup the remote user connection service the following steps must be carried out Step 1 Configure ...

Page 65: ...ord or eventually a certificate The data is encrypted TLS or L2TP An IP address belonging to the local network is automatically assigned to the remote user s PC The IPL 3G manages PPTP and TLS or L2TP remote connections Only one type can be selected It will apply to all the remote users connections A PPTP is the simplest type of remote user connection data is not encrypted The remote user can be i...

Page 66: ...ons from a remote PC to the IPL 3G easy moreover it includes a connection book in such a way one just need a click to connect to a remote site We describe hereafter how to configure the router and the M2Me_Secure software to set a TLS VPN between both Step 1 Router configuration To configure a remote user TLS connection select the Setup menu the Remote users menu and then the User list menu Select...

Page 67: ...ficate value is selected the remote PC is authenticated with the certificate and the user with a login and password In that case the PC certificate must be stored in the user list Encryption algorithm Message digest algorithm parameters Leave the default values Step 2 Configure the M2Me_Secure software For detailed information report to the M2Me_Secure manual Click Menu and then New site The Site ...

Page 68: ... to set a PPTP remote user connection between them Step 1 Router configuration select the Setup menu the Remote users menu and then the User list menu Select the VPN type PPTP Remark The properties button allows to modify the authentication protocol leave the default configuration if the PPTP client is a PC running Windows Step 2 Set up a PPTP connection on the PC side ...

Page 69: ...ddress assigned by the provider to the IPL 3G antenna WAN interface is not a public IP address The M2Me_Connect service solves that difficulty The PC does not connect directly to the IPL 3G both the PC and the router connect to the M2Me_Connect service Once both parties have been authenticated by the M2Me_Connect service with their own certificate a TLS VPN is set from end to end from the PC to th...

Page 70: ...Click the Control menu and press the connect now button Go to the Diagnostic menu Network status menu and then M2Me When the connection between the router and the M2Me_Connect service is established the port number and protocol are displayed Deselect the ports numbers needlessly selected If too many ports have been selected the connection delay may be long it is why we advise to unselect all the p...

Page 71: ...The users list registers 25 authorised remote users forms Each user form stores the identity of the user Login and password his email address to send alarm emails and the filter assigned to him To display the user list select the Setup menu the Remote users menu and then the User list menu Attention Coming from factory a default user is registered his login is admin and the password is also admin ...

Page 72: ...at the beginning of the remote connection E mail The IPL 3G will send an email to that address in two situations Alarm email the IPL 3G sends an alarm email to the defined user If the input 1 is closed or opened if that option has been set Internet connection email Once connected to the Internet the IPL 3G will send to the demanding user an email containing the dynamic IP assigned to the IPL 3G by...

Page 73: ...kets is not checked by the remote users filters because the filters apply to the remote users connections according the login and password of the remote user checked when the remote user connection is set The main filter It filters IP packets whether carried inside one of the VPNs or outside a VPN The main filter checks source and destination IP addresses and the source and destination ports The m...

Page 74: ...ite for a packet coming from the WAN or coming from the LAN WAN to LAN The default policy can be Accept or drop LAN to WAN The default policy can also be Accept or drop For instance if the default policy assigned the WAN to LAN traffic is drop it means that an IP packet which does not match any of the rules of the main filter will be rejected Main filter table The main filter is a table each line ...

Page 75: ...SET UP UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 75 If the packet does not match any of the rules of the table the default policy is applied to the packet drop or reject ...

Page 76: ...filtered Configure successively the WAN traffic rules using the same method Step 1 Select the default policy LAN to WAN parameter That parameter sets what the filter will decide if an IP packet coming from the LAN does not match any f the rules of the filter If the value Accept is selected the IP packet will be transmitted to the VPN If the value Drop is selected the IP packet will be rejected WAN...

Page 77: ...the netmask for instance the value 24 means 255 255 255 0 the value 16 means 255 255 0 0 Destination IP address destination port parameters Enter the value of the destination IP address and the destination port number Select the netmask value 20 3 Remote users filters A remote user filter applies to the IP packets received inside a remote user connection 25 remote user filters can be configured an...

Page 78: ...pped Select the menu system and then service list The list of TCP ports is displayed Click add a service Enter the label of that the new service assign a protocol udp tcp icmp and a port number Save The list is updated Step 2 Enter the list of devices of the LAN network Select the System menu then Devices list The list of the devices of the LAN network is displayed Click add a device Assign a labe...

Page 79: ...GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 79 Step 3 Build a remote user filter Select the security menu then firewall and then Filter list The users filters list is displayed Click add a new filter ...

Page 80: ... list Select a device among the ones which have been stored and a service also called port Add other rules if necessary Click OK when the filter is complete the updated filter list is displayed Step 4 Assign a filter to each user Select the Remote user and then User list Select a user to which you want to assign a filter and click modify the user window is displayed Assign a filter to the user cli...

Page 81: ...serial ports the UDP or TCP port numbers must be different The gateways listed below are provided Modbus client or server i e master or slave To connect several serial modbus slaves to several IP modbus clients Or to connect a serial modbus master to an IP modbus server RAW TCP server or client To connect 2 serial devices through an IP network RAW UDP To exchange serial data between several serial...

Page 82: ...hich the gateway will send request to the slaves PLC Timeout waiting for the answer parameter Set up the timeout the gateway has to wait for the answer of the modbus slave answer Local retry parameter Set up the number of times the gateway will repeat a request before declaring a failure Inter character gap parameter Set up the maximum delay the gateway will have to wait between a received charact...

Page 83: ...parameter Select the right option Inter character gap parameter Set up the maximum delay the gateway will have to wait between a received character of a modbus answer frame and the following character of the same frame TCP inactivity Timeout parameter Set the time the gateway will wait before disconnecting the TCP link if no characters are detected TCP port number parameter Set the TCP port number...

Page 84: ...tring the gateway will store before transmitting it to the IP network Timeout of RS232 485 end of frame parameter Set up the delay the gateway will wait before declaring complete a string received from the asynchronous device Once declared complete the gateway will transmit the string to the IP network TCP inactivity Timeout parameter Set the time the gateway will wait before disconnecting the TCP...

Page 85: ...maximum length of an asynchronous string the gateway will store before transmitting it to the IP network Timeout of RS232 485 end of frame parameter Set up the delay the gateway will wait before declaring complete a string received from the asynchronous device Once declared complete the gateway will transmit the string to the IP network TCP inactivity Timeout parameter Set up the time the gateway ...

Page 86: ...ent to each destination IP address stored in the table 21 3 2 Configuration Select the gateway menu and then the Transparent menu and then click RAW UDP Select the Activate option Serial input buffer size parameter value 1 to 1024 Sets the maximum size of an UDP frame End of frame time out parameter value 10 ms to 5 sec Sets the delay the gateway will wait before sending the UDP frame towards the ...

Page 87: ...SET UP UMTS GPRS EDGE router ref IPL 3G User guide ref 9019409 01 Page 87 A different UDP port number can be entered for each destination IP address ...

Page 88: ... IP address of the IP frames must be the LAN IP address of the IPL 3G router 22 2 Configuration Select the Setup menu and then the USB menu Activate checkbox Select the Activate checkbox Use a specific IP address checkbox If modbus TCP traffic only has to be forwarded to the USB device that checkbox must not be selected If other kinds of traffic have to be forwarded that checkbox has to be selecte...

Page 89: ...ificate can be used for all the connections 23 2 Alarms 23 2 1 SNMP The IPL 3G router is able to send snmp traps when alarms occur Activation If that option is selected the router will send an SNMP trap if an alarm is detected SNMP network management IP address Enter the IP address of the management platform SysName SysLocation That fields allow to identify the source device Example Sysname etic S...

Page 90: ...the user to whom the email must be sent Text to send Enter the email text 23 3 Configuring the web portal The web portal in an html page it displays a list of devices connected to the LAN Each line of the list is made of the device name its IP address and three links The html link To go directly to the web server of the associated machine The explore link To explore the HD of the associated machin...

Page 91: ... destination device The IPL 3G router is able to resolve any domain name composed with the name of one of the devices entered in the devices list followed the site name which is entered at the top of the devices list DNS relay The IPL 3G router behaves also like a DNS relay any DNS request it receives from the LAN which cannot be resolved because the device is not registered in the devices list wi...

Page 92: ......

Page 93: ...LAN interfaces That part of the page shows the data of the LAN interface MAC address Ethernet mode 10 100 half or full IP address WAN interface 3G GPRS EDGE 3G signal strength It must be better than 90 dBm to en Remark A s the number is negative 85 dBm is better than 90 dBm for instance State Connected or not to the 3G network Local IP address It is the IP address assigned by the provider to the a...

Page 94: ...ays Type of the gateway Modbus RAW Telnet serial port set up data rate etc number of characters received or sent Number of TCP frames or UDP datagrams received or sent Number of TCP connections enabled The View link displays a window which shows the hexadecimal received and transmitted traffic over each serial COM port It can be a great help for trouble shooting ...

Page 95: ...guration and give a name to the file The file suffix is bin To restore a parameters file Select the System menu and then Save restore Click the browse button and select the parameters file Click the Load button and confirm to restart the product Attention A parameters file can only be downloaded to a product having the same firmware version It is why we advise to assign a name to a parameter file ...

Page 96: ...using the Browser button Click on Show dir to check the files of the directory rfsmini tgz rootfs bin u boot bin and uImage Step 4 Update the firmware Launch the web browser Enter the IP address of the ETIC product the home page of the ETIC configuration server is displayed Select the System menu and then firmware Update In the field IP address of the TFTP server enter the IP address of your PC No...

Page 97: ... Alarm To set up alarm SNMP traps To set up alarm emails Serial gateway To set up the modbus gateway client server To set up the Unitelway gateway To set up the RAW TCP RAW UDP TELNET gateways System To set up SNMP parameters To enter the devices list To update the service list To update time and date 2 Diagnostic menu Log To display the events VPN connections user connections Network status Inter...

Page 98: ...Page 98 User guide ref 9019409 01 UMTS GPRS EDGE router ref IPL 3G To display the certificate product key To display the firmware version ...

Page 99: ......

Page 100: ...13 Chemin du Vieux Chêne 38240 Meylan France Tel 33 4 76 04 20 00 Fax 33 4 76 04 20 01 E mail contact etictelecom com Web www etictelecom com ...

Reviews:

No comments

Related manuals for IPL-3G

BB-HGW700A - Network Camera Router

Brand: Panasonic Pages: 10

Brand: Panasonic Pages: 4

ZyXEL EES-1024AF

Brand: ZyXEL Communications Pages: 99

Brand: Vivotek Pages: 170

Brand: BSD Networks Pages: 7

Brand: Garderos Pages: 23

Brand: Teletronics International Pages: 57

2000 IDU Series

Brand: EMS Pages: 52

IE-SW-PL09M-5GC-4GT

Brand: Weidmuller Pages: 15

Brand: Amit Pages: 75

8-Port 10/100Mbps Fast Ethernet Switch

Brand: Amer.com Pages: 14

Brand: Matrix Switch Corporation Pages: 54

Brand: Amphenol Pages: 43

Brand: Beckhoff Pages: 84

Brand: ZyXEL Communications Pages: 4

Brand: Ruckus Wireless Pages: 4

Brand: Teldat Pages: 47

Brand: Juniper Pages: 30

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands